EUVD-2001-1295

Buffer overflows in Critical Path 1 InJoin Directory Server or 2 LiveContent Directory allow remote attackers to cause a denial of service crash and possibly execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1319

Microsoft Exchange 5.5 2000 allows remote attackers to cause a denial of service hang via exceptional BER encodings for the LDAP filter type field, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1315

The CVE-2001-1315 issue affects Critical Path’s InJoin Directory Server and LiveContent Directory. The vulnerability arises in the LDAP handling code, specifically through malformed BER encodings used in the PROTOS LDAPv3 test suite, which can be exploited remotely to trigger a crash (DoS) and ma...

CVE-2001-1306

iPlanet Directory Server 4.1.4 and earlier LDAP allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid BER length of length fields, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1308

CVE-2001-1308 involves format-string vulnerabilities in the iPlanet Directory Server, version 4.1.4 and earlier, in the LDAP handling code. The flaws allow remote attackers to cause a denial of service (crash) and potentially execute arbitrary code, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2001-1311

CVE-2001-1311 refers to buffer overflows in Lotus Domino R5 pre-5.0.7a that allow a remote attacker to cause a denial of service and potentially execute arbitrary code, demonstrated by the PROTOS LDAPv3 test suite. The vulnerability affects Domino R5.0.7 and earlier versions, with remediation doc...

CVE-2001-1306

The CVE-2001-1306 issue affects iPlanet Directory Server 4.1.4 and earlier (LDAP). The vulnerability allows a remote attacker to cause a denial of service (crash) and potentially execute arbitrary code via invalid BER length fields, as demonstrated by the PROTOS LDAPv3 test suite. Remediation (if...

CVE-2001-1312

The CVE-2001-1312 issue affects Lotus Domino R5 prior to version 5.0.7a, where LDAP handling code contains format string vulnerabilities. Exploitation could cause remote denial of service and, potentially, arbitrary code execution, as demonstrated by the PROTOS LDAPv3 test suite. The CERT advisor...

CVE-2001-1317

The connected CERT CERT Advisory CA-2001-18 documents multiple vulnerabilities in Teamware Office LDAP server that may allow remote denial-of-service and possibly arbitrary code execution, triggered by malformed/invalid BER-encoded LDAP data (as demonstrated by PROTOS LDAPv3 tests). Affected prod...

CVE-2001-1314

The CVE-2001-1314 issue affects Critical Path components InJoin Directory Server and LiveContent Directory. The root cause is a buffer overflow in the LDAP handling code, demonstrated by PROTOS LDAPv3 tests. Consequences documented include remote denial of service (crash) and potential arbitrary ...

CVE-2001-1321

Oracle Internet Directory Server 2.1.1.x and 3.0.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via invalid encodings of BER OBJECT-IDENTIFIER values, as demonstrated by the PROTOS LDAPv3 test suite...

CVE-2002-0013

CVE-2002-0013 concerns numerous SNMPv1 implementation flaws that allow remote DoS or privilege escalation via SNMP GetRequest, GetNextRequest, and SetRequest messages, demonstrated by the PROTOS c06-SNMPv1 test suite. The vulnerability is described across multiple advisories and vendors (e.g., AR...

CVE-2002-0012

CVE-2002-0012 covers multiple SNMP implementations vulnerable to remote denial of service or privilege escalation through improper handling of SNMPv1 trap messages, demonstrated by the PROTOS c06-SNMPv1 test suite. The IBM bulletin corroborates SNMPv1 trap handling issues and references CVE-2002-...

CVE-2002-0012

Vulnerabilities in a large number of SNMP implementations allow remote attackers to cause a denial of service or gain privileges via SNMPv1 trap handling, as demonstrated by the PROTOS c06-SNMPv1 test suite. NOTE: It is highly likely that this candidate will be SPLIT into multiple candidates, one...

Microsoft Exchange LDAP Service is vulnerable to denial-of-service attacks

Overview The Microsoft Exchange LDAP Service contains vulnerabilities that may allow denial-of-service attacks. These vulnerabilities were revealed using the PROTOS LDAPv3 test suite and are documented in CERT Advisory CA-2001-18. If your site uses this product, the CERT/CC encourages you to foll...